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(54) Network-device control system and apparatus 



(57) In a network-device control system for control- 
ling a network device such as a router, which is located 
between a communication terminal employed by a user 
and a server with which the terminal communicates, at 
a priority that has been set in advance lor the user or for 
an application, an event notif ication device detects that 
a user has logged in to the communication terminal or 
that the user has launched a predetermined application 



from the communication terminal and reports the user 
identifier or the application identifier to a network-device 
controller. The latter acquires user priority or application 
priority on the basis of the reported identifier and, in 
accordance with the priority, controls the router on the 
communication path between the communication termi- 
nal and the server. 
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Description 

BACKGROUND OF THE INVENTION 

[0001] This invention relates to a system and appa- 
ratus for controlling network devices. More particularly, 
the invention relates to a network-device control system 
and apparatus for performing control of priority, band- 
width, discard rate and delay in relation the devices that 
construct a network. 

[00021 The following functions and features (1) to 
(3) are currently sought as network requirements: 

(1) Quality assurance 

[0003] Unification of continuous traffic, such as tel- 
ephone traffic that is sensitive to delay, and basic busi- 
ness traffic with an IP (Internet Protocol) network of 
superior cost performance is sought. However, the 
basic nature of an IP network is best-effort transport of 
IP packets. In such a best-effort transport environment, 
an effort is made only to transport arriving packets to 
the next stage without distinguishing among users or 
among applications. Packets that cannot be transported 
(i.e., packets for which buffer overflow has occurred) are 
discarded as is. Accordingly, in order for a best-effort IP 
network to accommodate delay-sensitive traffic, it is 
required that control of traffic priority and assurance of 
bandwidth based upon the user or application is intro- 
duced in an IP network. 

(2) Minimum modification of existing network devices 

[0004] Replacing terminal devices and network 
devices (routers, switches, etc.) and installing new soft- 
ware in these devices in order to assure bandwidth and 
control priority on a network raises the cost of introduc- 
tion and, hence, is a hindrance to such introduction. 
Minimizing the modification of existing devices is 
required in order to solve this problem. 

(3) Quality and priority control capable of dealing with 
dynamic modification of terminal devices and network 
devices 

[0005] Among all devices that construct a network, 
it will suffice to apply quality and priority control solely to 
end-to-end devices on the communication path. This 
communication path is decided in accordance with a 
predetermined routing protocol based upon the destina- 
tion address with which communication is performed 
and the terminal address of the accessing party. How- 
ever, the destination address and terminal address 
change constantly depending upon the location of the 
user and the application utilized. A dynamic quality and 
priority control method that can deal with such change 
is sought 

[0006] The following two methods have been con- 



templated for the purpose of performing quality assur- 
ance control such as control for assurance of bandwidth 
or control of priority. 

[0007] The first method involves statically configur- 
> ing network devices for the purpose of quality-assur- 
• ance control. Specifically, control of communication 
quality with respect to terminal-to-terminal communica- 
tion is performed by configuring the network devices 
before hand so that predetermined bandwidth assur- 
io ance and priority control is attained. This is the most 
widely utilized approach at present. In order to configure 
for bandwidth assurance and priority control (i.e., in 
order to establish control of quality), there are two meth- 
ods, namely (a) a method referred to as limited configu- 
i$ ration method which includes predicting communication 
that will occur and configuring network devices on this 
communication path for control of quality in limited fash- 
ion, and (b) a method which includes configuring all 
configurable network devices for control of quality com- 
20 prehensively without particularly specifying a path. 
[0008] The second method uses an RSVP 
(Resource Reservation Protocol) for which control of 
quality can be configured dynamically. RSVP is a con- 
trol protocol for reserving resources in the IP layer. 
25 According to RSVP. control messages are exchanged 
between routers that support RSVP and the sender and 
receiver. The RSVP works to reserve transmission 
paths and memory resources within an apparatus so 
that an application can be executed. Fig. 20 is a dia- 
30 gram useful in describing RSVP. A sender 1 sends a 
receiver 2 a path message that describes the traffic 
characteristics of the information (content) to be trans- 
mitted. The path message is distributed to the receiver 
2 by being transferred along a path (routers 3, 4) set up 
35 by a predetermined routing protocol. The receiver 2 
refers to the content described in the path message and 
sends a reserve message, which describes the 
resources requiring reservation, back to the sender 1 . If 
reservation requests from a plurality of receivers are 
40 merged and acceptance of a requested bandwidth res- 
ervation is possible in a router along the path, band- 
width is secured in accordance with the content of the 
reservation request and a reserve message is trans- 
ferred to a router upstream and to the sender 1. If 
45 acceptance of a requested bandwidth reservation is 
impossible, however, the reserve message is discarded 
and an error message is transmitted to the receiver 1 . 
[0009] The second method based upon RSVP 
- described above makes it possible to control quality 
so dynamically when the user so desires. 

[0010] However, the first and second methods set 
forth above do not always satisfy the above-mentioned 
requirements (1), (2) and (3). 
[0011] If communication different from that pre- 
ss dieted in advance takes place, as when a user makes 
access from a terminal different from that configured 
beforehand or when a network device is added on 
anew, the limited configuration technique according to 
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the first method is such that static quality-control set- 
tings will not exist for such communication. This means 
that the required control of quality cannot be performed. 
In other words, with the limited configuration method, 
changes in conditions cannot be dealt with and, as a 5 
result, control of quality cannot be realized. 
[001 2] With the other technique available in accord- 
ance with the first method, namely the technique 
through which all configurable network devices are con- 
figured for quality control, the user can make access 10 
from any terminal whatsoever because all of the termi- 
nals will have been configured. However, since settings 
that support all communication patterns are required for 
all network devices, the storage area necessary in a 
network device for the purpose of storing these settings 15 
is enormous. (The size of the storage area is propor- 
tional to the square of the number of terminals.) Since a 
network device possesses only a limited storage area, 
such comprehensive configuring of network devices is 
difficult. The result is that network communication 20 
assumed beforehand undergoes limited configuration. 
[001 3] With the second method, it is assumed that 
both sending and receive terminals involved in commu- 
nication and all network devices (routers) on the path 
along which this communication takes place support 25 
RSVP. Consequently, if a network device that does not 
support RSVP exists in the network, this device cannot 
undergo any control of quality. If congestion occurs in 
regard to this network device, even a packet in commu- 
nication requiring control of quality will be discarded or 30 
delayed. The end result is that communication quality 
cannot be controlled. In order to avoid this problem, 
components which support RSVP are required for all 
network devices and it is necessary to increase the stor- 
age area and processing capability of each network 35 
device. 

SUMMARY OF THE INVENTION 

[0014] Accordingly, an object of the present inven- 40 
tion is to arrange it so that priority control and quality 
control (control of bandwidth, discard rate and delay) 
can be carried out even if there is a change in a terminal 
employed by a user or a change in network configura- 
tion due to the addition of a network device. 45 
[0015] Another object of the present invention is to 
arrange it so that priority control and quality control can 
be performed, without dependence upon a specific pro- 
tocol such as RSVP, even if there is a change in a termi- 
nal employed by a user or a change in network so 
configuration due to the addition of a network device. 
[001 6] Another object of the present invention is to 
arrange it so that communication can be performed 
between a terminal employed by a user and a server, 
which is the destination of communication, at a priority 55 
or quality set for the user in advance. 
[001 7] A further object of the present invention is to 
arrange it so that communication can be performed 
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between a user terminal that has launched an applica- 
tion and a server, which is the destination of communi- 
cation, at a priority or quality set for the application in 
advance. 

(a) First network-device control system of the present 
invention 

[0018] A first network-device control system 
according to the present invention includes (1) an event 
notification device for detecting that a user has logged in 
to a communication terminal or that a user has 
launched a predetermined application from a communi- 
cation terminal, and giving notification of an identifier of 
the user and of the fact that an event has occurred, and 
(2) a network-device controller for performing priority 
control of a network device based upon information of 
which notification has been given by the event notifica- 
tion device. The network-device controller acquires the 
priority of the user indicated by the user identifier of 
which notification has been given by the event notifica- 
tion device, obtains a network device on a communica- 
tion path between the communication terminal 
employed by the user and a server which is the destina- 
tion of communication, generates information neces- 
sary to perform priority control in accordance with user 
priority, and sets this priority control information in each 
network device (routers, etc.) on the communication 
path. 

[001 9J In the first network-device control system 
described above, the event notification device includes 
(1) an event detector for detecting that a user has 
logged in to a communication terminal or that a user has 
launched an application from a communication termi- 
nal, and (2) an event notifier for notifying the network- 
device controller at least of the fact that the event 
occurred and of the user identifier. Further, the network- 
device controller includes (1) an event receiver for 
receiving notification from the event notifier, (2) a priority 
acquisition unit for acquiring the priority of a user indi- 
cated by a received user identifier, (3) a device selector 
tor selecting a network device which is subjected to pri- 
ority control based upon the priority of the user, (4) a 
device-specific information acquisition unit for acquiring 
state of configuration of the network device and a 
method of configuring the device, (5) a configuration 
information generator for generating priority-control 
configuration information for performing priority control 
of each network device based upon the acquired 
device-specific information and user priority, and (6) a 
configuration information transmitter for transmitting the 
priority-control configuration information, which has 
been generated by the configuration information gener- 
ator, to the selected network device to thereby set the 
information in this network device. 
10020] In accordance with the first aspect of the 
invention, a network device is obtained on a communi- 
cation path connecting a communication terminal 
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employed by a user and a server that is the destination 
of communication, and priority control is performed 
upon setting priority information, which conforms to the 
priority of the user, in this device. As a result, control of 
priority can be performed dynamically, without using a s 
specific protocol such as RSVP, even if there is a 
change in a terminal used by a user or a change in net- 
work configuration, such as a change due to the addi- 
tion of a network device. Further, in accordance with the 
first aspect of the invention, communication between a w 
terminal employed by a user and a server that is the 
destination of communication can be performed at a pri- 
ority set for the user in advance. As a result, by setting a 
priority that takes the section/department to which an 
employee belongs and organization into account in an 75 
enterprise network, it is possible to perform communi- 
cation based upon priority control commensurate with 
the set priority. 

[0021] Further, according to the first aspect of the 
invention, there is provided a database unit for storing, 20 
in association with a user identifier, user information that 
includes the address of the server that is the destination 
of communication and the user priority. The event notifi- 
cation device acquires user priority and the server 
address from the database unit and reports these to the 25 
network-device controller. If this arrangement is 
adopted, the user, merely by entering the user identifier 
from a communication terminal and logging in, estab- 
lishes a communication path between this communica- 
tion terminal and the server with which the user wishes 30 
to communicate. Communication between the terminal 
employed by the user and the server can be performed 
at the priority set tor the user beforehand. 
[0022] Further, when an application is launched 
after user log-in, the priority control mentioned above 35 
can be carried out. If this arrangement is adopted, the 
configuring of priority control necessary lor the user in a 
network is performed more accurately by taking launch- 
ing of an application by the user as an event. When pri- 
ority control is necessary, such control can be 40 
configured solely for the necessary network device. 

(b) Second network-device control'system of the 
present invention 

45 

[0023] A second network-device control system 
according to the present invention includes (1) an event 
notification device for detecting that a user has 
launched a predetermined application from a communi- 
cation terminal, and giving notification of an identifier of so 
this application and of the fact that application-launch 
event has occurred, and (2) a network-device controller 
for performing priority control of a network device based 
upon information of which notification has been given. 
The network-device controller acquires the priority of 55 
the application indicated by the application identifier of 
which notification has been given by the event notif ica- 
tion device, obtains a network device on a communica- 



tion path between the communication terminal and a 
server with which the communication terminal commu- 
nicates, generates information necessary to perform 
priority control in accordance with this priority, and con- 
figures each network device with this priority control 
information. 

[002*] In the second network-device control system 
described above, the event notification device includes 
(1) an event detector for detecting that a communication 
terminal has given rise to an application-launch event, 
and (2) an event notifier for notifying the network-device 
controller at least of the fact that the event occurred and 
of the application identifier. Further, the network-device 
controller includes (1) an event receiver for receiving 
notification from the event notrf ier, (2) a priority acquisi- 
tion unit for acquiring the priority of an application indi- 
cated by a received application identifier, (3) a device 
selector for selecting a network device which is sub- 
jected to priority control based upon the priority of the 
application, (4) a device-specific information acquisition 
unit for acquiring state of configuration of the selected 
network device and a method of configuring the device, 
(5) a configuration information generator for generating 
priority-control configuration information for performing 
priority control of. each network device based upon the 
aoquired device-specific information and application pri- 
ority, and (6) a configuration information transmitter for 
transmitting the priority-control configuration informa- 
tion, which has been generated by the configuration 
information generator, to the selected network device to 
thereby set this information in this network device. 
[0025] In accordance with the second aspect of the 
invention, a network device is obtained on a communi- 
cation path connecting a communication terminal 
employed by a user and a server that is the destination 
of communication, and priority control is performed 
upon setting priority information, which conforms to the 
priority of the launched application, in this device. As a 
result, control of priority can be performed dynamically, 
without using a specific protocol such as RSVP, even 
there is a change in a terminal used by a user or a 
change in network configuration, such as a change due 
to the addition of a network device. As a result, by con- 
figuring priorities for various applications in an enter- 
prise network upon taking into account the urgency and 
importance of these applications, it is possible to per- 
form communication based upon priority control com- 
mensurate with the set priority. 
[0026] Further, according to the second aspect of 
the invention, the event notification device acquires the 
priority of the application, the address of the server that 
is the destination of communication and the address of 
the communicating terminal from a database unit based 
upon the application identifier and reports these to the 
network-device controller. If this arrangement is 
adopted, the user, merely by entering the user identifier 
from a prescribed communication terminal, logging in 
and launching the prescribed application, can set up a 
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communication path between this communication termi- 
nal and the server that conforms to the application. And 
communication between the terminal employed by the 
user and the server can be performed at the priority set 
for the application beforehand. 5 

(c) Third network-device control system of the present 
invention 

[0027] In the first and second network-device con- 10 
trol systems according to the present invention, priority 
is set in advance in conformity with the user or applica- 
tion and priority control is performed in accordance with 
the priority of the user or the priority of the application. 
[0028] In the third network-device control system is 
according to the present invention, a value o1 band- 
width, discard rate or delay time instead of priority is 
configured for a user or application and bandwidth con- 
trol, discard-rate control or delay control is carried out in 
accordance with the configured value on a communica- 20 
tion path between the terminal employed by the user 
and the communicating server. The configuration of the 
network-device control system in accordance with the 
third aspect of the present invention is substantially sim- 
ilar to that of the first and second aspects of the inven- 25 
tion. 

[0029] In accordance with the third aspect of the 
present invention, quality control can be performed 
dynamically, without using a particular protocol, even if 
there is a change in a terminal used by a user or a 30 
change in network conf iguration due to the addition of a 
network device. Further, the terminal employed by the 
user and the server that is the destination of communi- 
cation can communicate at a quality set in advance for 
the user or application. 35 
[0030] Other features and advantages of the 
present invention will be apparent from the following 
description taken in conjunction with the accompanying 
drawings. 

40 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0031] 

Fig. 1 is a block diagram useful in describing an 45 
overview of the present invention; 
Fig. 2 is a diagram showing an example of the con- 
figuration of a network according to a first embodi- 
ment of the present invention; 

Figs. 3A and 3B are diagrams showing an example so 
of information that has been stored in a directory 
server according to the first embodiment; 
Figs. 4A. 4B and 4C are diagrams useful in describ- 
ing the topology of network devices; 
Fig. 5 is a diagram showing an example of router 55 
information that has been stored in a directory 
server; 

Rg. 6 is a diagram useful in describing priority con- 



trol; 

Fig. 7 is a diagram useful in describing a sequence 
according to a first embodiment of the present 
invention; 

Fig. 8 is a diagram showing an example of the con- 
figuration of a network according to a second 
embodiment of the present invention; 
Figs. 9A, 9B and 9C are diagrams showing an 
example of information that has been stored in a 
directory server according to the second embodi- 
ment; 

Fig. 10 is a diagram useful in describing a 
sequence according to a second example of the 
present invention; 

Fig. 11 is a diagram showing an example of the 
configuration of a network according to a third 
embodiment of the present invention; 
Rgs. 12A, 12B and 12C are diagrams showing an 
example of information that has been stored in a 
directory server according to the third embodiment; 
Rg. 13 is a diagram useful in describing a 
sequence according to a third example of the 
present invention; 

Rg. 14 is a diagram showing an example of the 
configuration of a network according to a fourth 
embodiment of the present invention; 
Rgs. 15A, 15B and 15C are diagrams showing 
example of information that has been stored in a 
directory server according to the third embodiment; 
Rg. 16 is a diagram useful in describing a 
sequence according to a fourth example of the 
present invention; 

Rg. .17 is a diagram showing another example of 
information that has been stored in a directory 
server; 

Rg. 18 is a diagram useful in describing a band- 
width control sequence based upon occurrence of a 
log-in event; 

Rgs. 19A and 19B are diagrams showing an exam- 
ple of information that has been stored in a direc- 
tory server for when bandwidth control based upon 
a log-in event is performed; and 
Rg. 20 is a diagram useful in describing RSVP con- 
trol. 

DESCRIPTION PF THE PREFERRED EMBQpl- 
MENIS 

(A) Overview of the present invention 
(a) Construction 

[0032] Fig. 1 is a block diagram illustrating an over- 
view of the present invention. 
[0033] In Fig. 1, an event notification device A 
detects and reports the fact that a user has logged in 
from a communication terminal C or that a user has 
launched a predetermined application on the communi- 
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cation terminal C. A network-device controller B per- 
forms priority control of a network device N based upon 
information reported from the event notification device 

A. 

[0034] The event notification device A includes an 
event detector A1 for detecting that a user has logged in 
from the communication terminal C or that a user has 
launched an application from a communication termi- 
nal, and an event notifier A2 for notifying the network- 
device controller B of the fact that an event occurred, the 
identifier of the user or the identifier of the application. 
[0035] The network-device controller B includes an 
event receiver B1 for receiving notification from the 
event notifier A2; a configuration determination unit B2 
for acquiring the priority of a user indicated by a 
received user identifier or the priority of an application 
indicated by a received application identifier, and deter- 
mining whether it is necessary to configure for priority 
control; a device selector B3 for selecting a network 
device which is subjected to priority control based upon 
the priority acquired; a device-specific information 
acquisition unit B4 for acquiring the configured state of 
a selected network device and a method of configuring 
the device; a configuration information generator B5 for 
generating priority-control configuration information 
necessary for performing priority control of every each 
network device based upon the acquired device-specific 
information and priority; and a configuration information 
transmitter B6 for transmitting the priority-control config- 
uration information, which has been generated by the 
configuration information generator, to the selected net- 
work device N to thereby set this information in the net- 
work device. 

(b) Overview of first embodiment 

[0036] The first embodiment is such that when a 
user logs in from a communication terminal, the net- 
work-device controller takes the log-in as an event to 
configure priority-control information for a network 
device on the communication path in accordance with a 
priority that has been set in advance for this user, 
thereby performing control of priority. 
[0037] In a network having a device that records in 
memory the fact that a user has logged in from the com- 
munication terminal C, the event detector A1 reads the 
recorded content of the memory periodically and com- 
pares this with the previous recorded content to monitor 
a change in the recorded content, i.e., the occurrence of 
log-in. Alternatively, the event detector A1 monitors the 
occurrence of log-in by having the above-mentioned 
device notify it of the fact that the stored content has 
been updated. 

[0038] Upon detecting log-in, the event detector A1 
acquires the address of the communication terminal C. 
the identifier of the user who has logged in and the 
event type (log-in in this case), and the event notifier A2 
reports the acquired information to the network-device 
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controller B as event information. 
[0039] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 

5 ration determination unit B2. The latter recognizes the 
fact that an event occurred at the communication termi- 
nal C and determines, based upon the type of event, 
whether configuring of priority control is required. If the 
configuring is required, the configuration determination 

io unit B2 acquires information (user priority) that has 
been set in advance for the user and decides that traffic 
at such time that the user utilizes the network is to be 
controlled in accordance with the acquired priority. Next, 
the configuration determination unit B2 notifies the 

is device selector B3 of the event information and of the 
fact that configuring of priority is necessary. The device 
selector B3 selects, among a number of network 
devices {routers, etc.) in the network, network devices 
on a communication path between the communication 

20 terminal C of the user and the server that is the destina- 
tion of communication obtained from information that 
has been set in advance for this user. In other words, 
the network-device controller B selects network devices 
for which control of priority is required. 

25 [0040] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of priority 
control is required onto the received information from 
the previous stage and delivers the resulting information 

30 to the device-specific information acquisition unit B4. 
The latter acquires, for each device indicated by the 
delivered device addresses, a method of configuring 
information for each device, configurable parameters 
and states of the devices, appends this information to 

35 the received information and delivers the resulting infor- 
mation to the configuration information generator B5. 
On the basis of the information received, the configura- 
tion information generator B5 determines what kind of 
configuration content is required for what network 

40 device and through what method, generates, by using 
the user priority, configuration content (priority-control 
configuration information) for all devices requiring con- 
figuring, and reports this information to the conf iguration 
information transmitter B6. On the basis of the priority- 

45 control configuration information and configuration 
method obtained from the configuration information 
generator B5, the configuration information transmitter 
B6 transmits the priority-control information to all net- 
work devices N on the communication path that need to 

so be configured, thereby configuring these network 
devices. 

[0041] According to the first embodiment, the event 
notification device A detects an event and, on the basis 
of the event, the network-device controller B dynami- 
55 cally configures the priority-control information for the 
network devices on the communication path. This 
makes possible flexible control of priority that accommo- 
dates a change in the state of a network. In addition, it 
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is possible to perform communication control that con- 
forms to the priority that has been set in advance for a 
user Further, the protocol between a communication 
terminal (client), server and network device can be an 
already existing protocol. As a result, a network device 5 
or terminal need not be equipped with a special protocol 
in order to perform priority control. 

(c) Overview of second embodiment 

10 

[0042] The second embodiment is such that when a 
user launches an application after logging in from a 
communication terminal, the network-device controller 
takes the launching of the application as an event to 
configure priority-control information for a network 15 
device on the communication path in accordance with a 
priority that has been set in advance for this user, 
thereby performing priority control Therefore, unlike the 
first embodiment in which the configuring of priority- 
control information is performed by taking login as an 20 
event, the second embodiment configures priority-con- 
trol information by taking launching of an application 
after log-in as the event 

[0043] The event detector A1 monitors the launch- 
ing of applications in a manner similar to that of the first 25 
embodiment. Upon detecting launching of an applica- 
tion, the event detector A1 acquires the address of the 
communication terminal C that launched the applica- 
tion, the user identifier and the event type (launching of 
an application in this case), and the event notifier A2 30 
reports the acquired information to the network-device 
controller B as event information. 
[0044] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 35 
ration determination unit B2. As a result, the latter rec- 
ognizes the fact that an event occurred at the 
communication terminal C and determines, based upon 
the type of event, whether configuring of priority control 
is required. If configuring is required, the configuration 40 
determination unit B2 acquires priority information that 
has been set in advance for the user and decides that 
traffic at such time that the application utilizes the net- 
work is to be controlled in accordance with the priority of 
the user. Next, the configuration determination unit B2 45 
notifies the device selector B3 of the event information 
and of the fact that configuring of priority is necessary. 
Priority-control information is then configured for the 
network devices N on the communication path by con- 
trol similar to that of the first embodiment. so 
[0045] According to the second embodiment, prior- 
ity control is performed in accordance with a priority, 
which has been set in advance for the user, taking 
launching of an application after log-in as the event. In 
comparison with the first embodiment, therefore, conf ig- 55 
uring of priority control in iaccordance with user priority 
can be performed more reliably solely for network 
devices necessary for communication. 



(d) Overview of third embodiment 

[0046] The third embodiment is such that when a 
user launches an application after logging in from a 
communication terminal, the network-device controller 
takes the launching of the application as an event to 
configure priority-control information for a network 
device on the communication path in accordance with a 
priority that has been set in advance for this application, 
thereby performing priority control. 
[0047] The event detector A1 monitors the launch- 
ing of applications in a manner similar to that of the first 
embodiment. Upon detecting launching ot an applica- 
tion, the event detector A1 acquires the address of the 
communication terminal C that launched the applica- 
tion, the application identifier and the event type 
(launching of an application in this case), and the event 
notifier A2 reports the acquired information to the net- 
work-device controller B as event information. 
[0048] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. As a result, the latter rec- 
ognizes the fact that an event occurred at the 
communication terminal C and determines, based upon 
the type of event, whether configuring of priority control 
is required. If configuring is required, the configuration 
determination unit B2 acquires information (priority) that 
has been set in advance for the launched application 
and decides that traffic at such time that the application 
utilizes the network is to be controlled in accordance 
with the above-mentioned priority. Next, the configura- 
tion determination unit B2 notifies the device selector 
B3 of the event information and of the fact that configur- 
ing of priority is necessary. The device selector B3 
selects, among a number of network devices in the net- 
work, network devices on a communication path 
between the communication terminal C of the user and 
the server with which the application communicates. In 
other words, the network-device controller B selects 
network devices for which control of priority is required. 
[0049] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of priority 
control is required onto the received information from 
the previous stage and delivers the resulting information 
to the device- specific information acquisition unit B4. 
The latter acquires, for each device indicated by the 
delivered device addresses, a method of configuring 
information for each device, configurable parameters 
and states of the devices, appends this information to 
the received information and delivers the resulting infor- 
mation to the configuration information generator B5. 
On the basis of the information received, the configura- 
tion information generator B5 determines what kind of 
configuration content is required for what network 
device and through what method, generates, by using 
the application priority, configuration content (priority- 
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control configuration information) for ail devices requir- 
ing configuration, and reports this information to the 
configuration information transmitter B6. On the basis of 
the priority-control configuration information and config- 
uration method obtained from the configuration informa- 
tion generator B5, the configuration information 
transmitter B6 transmits the priority-control information 
to all network devices N that need to be configured, 
thereby configuring these network devices. 
[0050] Thus, the configuring of priority-control infor- 
mation needed to execute an application can be per- 
formed only for devices requiring priority control, this 
being carried out taking launching of the application by 
the user as the event. Further, communication control 
conforming to a priority that has been set in advance for 
an application can be performed. 

(e) Overview of fourth embodiment 

[0051] The fourth embodiment is such that when a 
user launches an application after logging in from a 
communication terminal, the network-device controller 
takes the launching of the application as an event to 
configure bandwidth, which is required by the applica- 
tion, for a network device on the communication path of 
the application in accordance with a communication- 
quality value (e.g.. bandwidth) that has been set in 
advance for this application, thereby performing band- 
width control of this network device. 
[0052] The event detector AT monitors the launch"'-, 
ing of applications in a manner similar to that of the f irst 
embodiment. Upon detecting launching of an applica- 
tion, the event detector A1 acquires the address of the 
communication terminal C that launched the applica- 
tion, the application identifier and the event type 
(launching of an application in this case), and the event 
notifier A2 reports the aoquired information to the net- 
work-device controller B as event information. 
[0053] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. The latter recognizes the 
fact that an event occurred at the communication termi- 
nal C and determines, based upon the type of event, 
whether configuring of bandwidth is required. If config- 
uring is required, the configuration determination unit 
B2 acquires the communication-qualify value (band- 
width information) of this application and decides that 
communication is to be performed upon reserving the 
bandwidth required by this application at the time of 
communication. Next, the configuration determination 
unit B2 notifies the device selector B3 of the event infor- 
mation and of the fact that configuring of bandwidth is 
necessary. The device selector B3 selects, among a 
number of network devices in the network, network 
devices on a communication path between the commu- 
nication terminal C of the user and the server with which 
this application communicates. In other words, the net- 



work-device controller B selects network devices for 
which configuring of bandwidth is required. 
[0054] After the network devices have been 
selected, the device selector B3 adds address informa- 

5 tion of the devices for which the configuring of band- 
width is required onto the received information from the 
previous stage and delivers the resulting information to 
the device-specific information acquisition unit B4. The 
latter acquires, for each device indicated by the deliv- 

10 ered device addresses, a method of configuring infor- 
mation for each device, configurable parameters and 
states of the devices, appends this information to the 
received information from the previous stage and deliv- 
ers the resulting information to the configuration infor- 

15 mation generator B5. On the basis of the information 
received, the configuration information generator B5 
determines what kind of configuration content is 
required for what network device and through what 
method, generates configuration content (bandwidth- 

20 control information) for all devices for which bandwidth 
required by the application must be reserved, and 
reports this information to the configuration information 
transmitter B6. On the basis of the bandwidth-control 
information and configuration method obtained from the 

25 configuration information generator B5, the configura- 
tion information transmitter B6 transmits the bandwidth- 
control information to all network devices N that need to 
be configured, thereby configuring these network 
devices. 

3b [0055] The foregoing is for a case where bandwidth 
required by an application is configured as a communi- 
cation-quality value. However, discard rate and delay 
time, etc., can also be configured in conformity with the 
application. 

35 [0056] In accordance with the fourth embodiment, 
the configuring of quality control such as bandwidth, 
discard rate and delay needed for an application can be 
performed in a network only for devices requiring config- 
uring, this being carried put taking launching of the 

40 application by the user as the event. 

(f) Overview of fifth embodiment 

[0057] The fifth embodiment is such that when a 
45 user logs in from a communication terminal, the net- 
work-device controller takes log-in as an event to config- 
ure bandwidth required by a user for a network device 
on the communication path in accordance with a com- 
munication-quality value (e.g., bandwidth) that has been 
so set in advance for this user, thereby performing band- 
width control of this network device. 
[0058] The event detector A1 monitors log-in in a 
manner similar to that of the first embodiment. Upon 
detecting log-in, the event detector A1 acquires the 
55 address of the communication terminal C. the identifier 
of the user who logged in and the event type (log-in in 
this case), and the event notif ier A2 reports the acquired 
information to the network-device controller B as event 
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information. 

[0059] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit 82. The latter recognizes the 
fact that an event occurred at the communication termi- 
nal C and determines, based upon the type of event, 
whether configuring of bandwidth is required, ff config- 
uring is required, the configuration determination unit 
B2 refers to the communication-quality value (band- 
width information) that has been set in advance for this 
user and decides that communication is to be per- 
formed upon reserving the bandwidth required at the 
time of communication. Next, the configuration determi- 
nation unit B2 notifies the device selector B3 of the 
event information and of the fact that configuring of 
bandwidth is necessary. The device selector B3 selects, 
among a number of network devices in the network, net- 
work devices on a communication path between the 
communication terminal C of the user and the commu- 
nication-destination server obtained from information 
that has been set in advance for this user. In other 
words, the network-device controller B selects network 
devices for which configuring of bandwidth is required. 
[0060] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of band- 
width is required onto the received information from the 
previous stage and delivers the resulting information to 
the device-specific information acquisition unit B4. The 
latter acquires, for each device indicated by the deliv- 
ered device addresses, a method of configuring infor- 
mation for each device, configurable parameters and 
states of the devices, appends this information to the 
received information from the previous stage and deliv- 
ers the resulting information to the configuration infor- 
mation generator B5. On the basis of the information 
received, the configuration information generator B5 
determines what kind of configuration content is 
required for what network device and through what 
method, generates configuration content (bandwidth- 
control information) for all devices for which bandwidth 
required by the user must be reserved, and reports this 
information to the configuration information transmitter 
B6,.On the basis of the bandwidth-control information 
and configuration method obtained from the configura- 
tion information generator B5, the configuration infor- 
mation transmitter B6 transmits the bandwidth-control 
information to all network devices N that need to be con- 
figured, thereby configuring these network devices. 
[0061 ] The foregoing is for a case where bandwidth 
required by an user is configured as a communication- 
quality value. However, discard rate and delay time, etc., 
can also be configured in conformity with the user. 
[0062] In accordance with the fifth embodiment, the 
configuring of quality control such as bandwidth, dis- 
card rate and delay needed for a user can be performed 
in a network only for devices requiring configuring, this 



being carried out taking user log-in as the event. 

(B) First embodiment 

5 (a) Configuration 

[0063] Fig. 2 is a diagram showing an example of 
the configuration of a network according to a first 
embodiment of the present invention. Shown in Fig. 2 

w are a client 1 1 (end terminal) such as a personal com- 
puter; a server 12 having a function tor storing data for 
a prescribed application, such as management applica- 
tion data and personnel application data, and distribute 
• ing the data to clients; networks 13< to 133; routers 14 r , 

15 142 for connecting these networks; switches 
(exchanges) 15i to 154 provided in the networks; a 
directory server 16 having a database for storing user 
information on a per-user (e.g., employee) basis; an 
event notifier 17 for detecting a log-in event and report- 

20 ing event information; and a configuration server 18 
which uses log-in as an event to configure the priority, 
which has been set for the user, for the network devices 
15 1( 14 1( 15 3 , 14 2 , 15 4 on a communication path CPT 
[0064] Fig. 2 illustrates an example of a network 

25 configuration for when the client 1 1 accesses the server 
12. This assumes a situation where the client 11 
accesses the server 12 via a network composed of var- 
ious routers and switches and either receives informa- 
tion that has been stored in the server 12 from the 

30 server 12 or transmits information to the server 12 to 
store the data in the server 12. In order to avoid a delay 
in receiving time or transmitting time and the discarding 
of information owing to the effects of other traffic within 
the network at the time of such communication, each 

35 router traversed by desired traffic provides a service 
through which packets are transported at a priority 
, higher than that of other traffic. A method of applying the 
present invention in such case will be described below. 

40 (b) Functions of components 

[00651 The network according to the first embodi- 
ment is composed of the client 11, the server 12, the 
directory server 16, the event notifier 17 and the config- 
45 uration server 1 8. The directory server 1 6, a Lightweight 
Directory Access Protocol (LDAP) for accessing this 
directory server, and the function through which the cli- 
ent 1 1 gives notification of log-in by LDAP constitute 
prior art. 

50 

(b-1) Client 

[0066] The client 1 1 in this embodiment is an end 
terminal such as a personal computer. The client 1 1 is 
55 connected to the network. If a user logs in this client, 
user information (the user identifier) is reported to the 
directory server 16 using LDAP. More specifically, when 
the user logs in by entering a user identifier or pass- 
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word, etc.. from the client 11 , the latter reports the user 
identifier and its own IP address to the directory server 
16 by LDAP. 

(b-2) Directory server 5 

[0067] The directory server 16 manages, in the 
form of a database, information relating to users who 
log in from each client. As shown in Fig. 3A. the direc- 
tory server 16 retains, in a form corresponding to each to 
user identifier, (1) the IP address of an important server 
accessed in dedicated fashion by the user, (2) priority 
when the user utilizes the network, and (3) other user- 
specific information. For example, if the networK is one 
constructed within an enterprise, the following will be is 
stored in the database of the directory server 16 in cor- 
respondence with user identification of each employee 
(i.e.. employee number): (1) the IP address of an impor- 
tant server accessed in dedicated fashion by the 
employee for business-related reasons, (2) priority 20 
when the employee utilizes the network, (3) other spe- 
cific information. Important servers accessed in dedi- 
cated fashion by an employee for business-related 
reasons correspond in one-to-one fashion to the section 
to which the employee belongs (accounting depart- 25 
ment. personnel department, planning department, pat- 
ent department, technical department etc.). Priority for 
utilizing a server is decided in dependence upon organ- 
ization (person in charge, manager, section chief, 
department chief, etc.). Accordingly, the address of the 30 
important server and the priority are set in advance tak- 
ing the post of the employee and the organization into 
account, and these are registered in the database. 
[0068] The client 11 accesses the directory server 
16 using LDAP. More specifically, the client executes 35 
database processing in regard to the user information 
using LDAP (the processing including responding to 
inquiries, updating information and creating of informa- 
tion). Then a user logs in by inputting the user identifier 
from the client 11. the latter reports the user identifier 40 
and the IP address of the client to the directory server 
16. Upon receiving the identifier and IP address, the 
directory server 16 registers the IP address of the client 
in the database in correspondence with the above-men- 
tioned user identifier, as shown in Fig. 3B. 45 
[0069] For example, as shown in Fig. 3A. (1) 
192.168.20.30 (= IPs) has been registered beforehand 
in the database of the directory server 1 6 and (2) 8 has 
been registered as the priority in the database of direc- 
tory server 16 in correspondence with a user identifier so 
"fujitsu". If user A logs in by inputting the user identifier 
"fujitsu" from the client 1 1 under these conditions, the IP 
address 192.168.10.20 (IPc) of the client 11 is regis- 
tered in the database anew as the user-specific infor- 
mation of user A, as shown in Fig. 3B. 55 



(b-3) Event notifier 

[0070] The event notifier 17 has a function for noti- 
fying the configuration server 1 8 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notifier 17 is shown as being 
separate from the directory server 1 6 in Fig. 2, H is actu- 
ally provided within the directory server 16. The event 
notifier 17 monitors a change in a prescribed item of 
each user in the database of the directory server 16 
from a logged-off state (a state in which there is no 
record of a logged-in client) to a logged-in state (a state 
in which there is a record of a logged-in client) and. if a 
change has occurred, notifies the configuration server 
18 of (1) the user identifier for which the change has 
occurred, (2) the IP address of the client who has 
logged in, and (3) the fact that an event has occurred 
due to log-in (i.e., the type of event). 
[0071] The monitoring of a change in prescribed 
items in the database can be implemented by having 
the event notifier 17 read out the database information 
of the directory server 16 periodically and compare the 
information with that read out previously. 

(b-4) Configuration server 

[0072] The configuration server 18 has the following 
functions (1) to (4): 

(1) Upon receiving notification of the user log-in 
event from the event notifier 17. the configuration 
server 18 uses the user identifier as a key to query 
the directory server 16 as to the IP address of the 
important server utilized by the user and the priority 
of the user and obtains responses regarding the IP 
address and user priority. 

(2) Next, using IP routing information from the IP 
address of the client 11 and the IP address of the 
server 12, the configuration server 18 specifies the 
routers 14 1t 14 2 and the switches 15-t. 163, 15 4 that 
relay the sent and received traffic that occurs 
between the client 1 1 and the server 1 2. More spe- 
cifically, the configuration server 18 identifies the 
network devices on the communication path CPT 
between the client 11 and server 12. This identifica- 
tion processing performed by the relaying routers is 
executed as follows: If the network is one which 
uses OSPF (Open Shortest Path First) as the IP 
routing protocol, the configuration server 18 
receives an OSPF LSA(Unk State Advertisement) 
packet that has been broadcast within the network. 
The LSA packet contains topology information indi- 
cating the router connection relationship. When the 
LSA packet is received, therefore, the router topol- 
ogy can be ascertained. On the basis of this topol- 
ogy information, the shortest path is calculated 
from the known IP addresses of the client 1 1 and 
server 12 using the Dijkstra algorithm and, hence, 
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the IP routing information is obtained. The configu- 
ration server 18 is capable of obtaining the path 
between the dient and server through this proce- 
dure. That is. the configuration server 18 is capable 
of identifying the relaying routers. 5 

Figs. 4A to 4C are diagrams useful in describ- 
ing the router topology information. In a case where 
routers A to E are connected as shown in Fig. 4C, 
the topology information of router A is a list of IP 
addresses of the adjacent routers, as shown in Fig. io 
4 A, and the topology information of router B is a list 
of IP addresses of the adjacent routers, as shown in 
Fig. 4B. In other words, Fig. 4A expresses the fact 
that router A having theiP address 192.168.15.1 
has been connected to the three routers B, C and is 
D. in regard to router B having the IP address 
192.158.10.1 among these three routers, it is indi- 
cated that there are two adjacent routers, namely 
routers A and E. as shown in Fig. 4B. Thus, a list of 
other routers to which a certain router is connected so 
is expressed as one table and these tables are pre- 
pared in a number equivalent to the number of 
nodes, thereby expressing the topology of the net- 
work 

(3) The configuration server 18 acquires informa- 25 
tion relating to each router (the states of the routers 
and configuration items) from the obtained IP 
addresses of the relaying routers. The states and 
configuration items are. e.g., configurable parame- 
ters, parameters that have already been config- 30 
ured. protocols utilized in configuring and the 
methods of configuration. 

These items of information may be applied to 
the configuration server 18 in advance, or each 
router may be inquired about them using a protocol 35 
such as SNMP (Simple Network Management Pro- 
tocol), or they may be registered together with user 
information as one item of network-device informa- 
tion (router information) and obtained by querying 
the directory server 16 using LDAP with the IP 40 
address of the router serving as a key. For example, 
the fact that logging in to a router is performed by 
Telnet, the fact that a determined ID and password 
are necessary, and the fact that it is possible to 
make various settings and obtain information by 45 
execution of commands are stipulated by the router 
information. 

Fig. 5 illustrates an example of a case where 
router information has been stored in the directory 
server 16. The attributes of the router A are stored so 
in the form of a sub-tree of a tree structure. The 
attributes are the IP address of the router, the 
queue control scheme (the name •'priority* is 
entered here and signifies a priority control 
scheme), the number (two) of queues, the configu- ss 
ration protocol (TeJnet in this example) and the 
names (Queue 1 , Queue 2) assigned to the respec- 
tive queues. This illustrates; a case in which priori- 



ties 1 , 2 have been entered for the queues. 

Fig. 6 is a diagram useful in describing a prior- 
ity control scheme for a router. The scheme 
includes the queue 1 of priority 1 (the highest prior- 
ity), the queue 2 of priority 2 (the lowest priority), an 
allocation unit 3 for allocating input packets to the 
queues 1. 2, and a readout controller 4 for reading 
packets out of the queue 1 of highest priority in the 
order of arrival, outputting the packets to a line and, 
only when no packets are present in the queue of 
highest priority, for reading packets out of the queue 
2 of lowest priority in the order of arrival and output- 
ting the packets to the line. In order to subject a pre- 
scribed packet to high-priority processing, the fact 
that the packet is to be processed at the high prior- 
ity is set in the allocation unit 3 together with the 
packet identification data. In response, from among 
the arriving packets, the allocation unit 3 inputs the 
packet having the above-mentioned identification 
data to the high-priority queue 1 so that the packet 
is subjected to high-priority processing. 
(4) On the basis of the priority of the user, the con- 
figuration server 18 obtains a priority control 
parameter to configure the network device. For 
example, if the user priority entered from the direc- 
tory server 16 is 8 and a router can be set to only 
two, namely high and low. priorities, the configura- 
tion server 18 determines whether the user priority 
of 8 is the high or low priority and, if it is the high pri- 
ority, configures the router to the high priority. 

[0073] By repeating the above configuring for each 
router, the configuring of the priority of all routers on the 
communication path from the client 1 1 to the server 12 
will eventually be completed and, as a result, it will be 
possible to provide a service tor communicating traffic 
between the client and server at a priority higher than 
that of other traffic. 

(c) Priority configuration sequence 

[0074] Fig. 7 is a diagram useful in describing a pri- 
ority configuration sequence according to the first 
embodiment. This illustrates a case in which when the 
user has logged in from the client 11. the configuration 
server 18 uses log-in as an event to perform control of 
priority by configuring the routers 14 1t 14 2 on the com- 
munication path with priority control information in 
accordance with a priority set in advance for this user. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 1 1 
having the IP address 192.169.10.20 (= IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier lujitsu" and the IP 
address of the client. The directory server 16 regis- 
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ters the IP address of the client in association with 
the user identifier lujitsu" in the database (see Fig. 
3B). 

II. The event notifier 17 within the directory server 
16 detects log-in and notifies the configuration 
server 18 of the fact that a user having the user 
identifier "f ujftsu" has logged in to the client 1 1 hav- 
ing the IP address IPc. 

III. The configuration server 18 queries the direc- 
tory server in regard to the priority of the user by 
LDAP using the user identifier "fujitsu" as the key 
and obtains, as a response, the fact that the 
address of the server 12 is 192.168.20.30 (= IPs) 
and that the priority is 8. 

IV. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router ^4^^ is "192.168.15.1 (* IPr)". 

V. The configuration server 18 obtains the state of 
the router 14 t and information (Fig. 5) relating to 
the configuration items. As a result, the router 14 n 
can be configured using Telnet and it is ascertained 
that this router possesses two priority settings, 
namely high and low. 

VI. If the priority that has been assigned to the user 
identifier "fujitsu" has a value of 8 (the maximum 
value being 10) among ten priority levels, the con- 
figuration server 18 recognizes that the router 14t 
is to be configured for high-priority processing. 
Next, the configuration server 18 performs Telnet 
communication for the router 14j of IP address IPr 
and establishes a high priority for communication 
for which the IP address on the originating side is 
IPc and the IP address at the destination is IPs. 

VII. The configuring of priority processing described 
above is performed for other routers as well. 

(d) Modification 

[0075] In the embodiment set forth above, a router 
on the communication path between the client and 
server is found using OSPF. However, the tocology and 
IP communication path may be found based upon other 
routing protocol information such as RIP (Routing Infor- 
mation Protocol) and a' network management protocol 
such as SNMP may be used. Further, the client 1 1 may 
execute traceroute processing with regard to a destina- 
tion IP address, thereby finding the IP address of a 
router on the communication path so that this informa- 
tion may be acquired by the configuration server 18. 
With this method, the configuration server need not 
compute topology information and path. 
[0076] According to the above-described embodi- 
ment, user information has been stored in the directory 
server. However, the state of log-in can be managed 
also by using another database having a data manage- 
ment function. 



[00771 With the foregoing embodiment, LDAP is uti- 
lized for the delivery of user data. However, any protocol 
can be utilized as long as it is capable of acquiring data. 
[0078] In the foregoing embodiment, the case 

5 assumed is one in which the priority of the user or the IP 
address of an important server is obtained. In a case 
where these are not obtained, however, configuring 
need not be performed or a priority or IP address given 
beforehand may be set instead of these values. 

10 [0079] Further, according to the foregoing embodi- 
ment, only one important server exists. However, in a 
case where there are a plurality of servers, the above- 
described embodiment can be applied to each one. 
[0080] Further, according to the foregoing embodi- 

is ment, configuring of priority is attempted for all relaying 
routers. However, the configuring of priority may be per- 
formed for a router decided in advance. The configuring 
of priority may be performed even for switches of a MAC 
(Media Access Control) layer in addition to relaying rout- 

20 ers present on the communication path. 

[0081] Further, according to the foregoing embodi- 
ment, the configuring of priority is carried out when an 
event occurs. However, the configuration server may 
periodically check for a change in path information or 

25 user information and, when such a change is detected, 
may cancel the original settings and then perform a 
reconfiguring operation, thereby making possible con- 
trol of priority for dealing with a change in network con- 
figuration or user information after settings have been 

30 made. Alternatively, the event detector may detect a 
change in user information and network configuration 
and notify the configuration server, in response to which 
the configuration server may cancel the original setting 
and then perform a reconfiguring operation. Further, the 

35 monitoring of a change in a prescribed item in the data- 
base can be implemented by adding on an event detec- 
tor as part of the function for writing data from the 
directory server 1 6 to the database. 
[0082] The modification set forth above can be 

40 applied to embodiments described below as well. 

(C) Second embodiment 
(a) Construction 

45 

[0083] Fig. 8 is a diagram illustrating an example of 
the construction of a second embodiment of the present 
invention. Components identical with those of the first 
embodiment shown in Fig. 2 are designated by like ref- 

50 erence characters. 

[0084] According to the second embodment, the 
event notifier 17 performs monitoring to determine that 
the user has launched an application at an end terminal 
and the configuration server 18 performs configuration 

55 for control of priority based upon detection o1 launching 
of the application (detection of an event). More specifi- 
cally, the second embodiment differs from the first 
embodiment in terms of the monitoring function of the 
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event notrfier 1 7. Performing control of priority at launch- 
ing of an application following log-in, as is done in the 
second embodiment, is better than performing control of 
priority at the time of log-in, as is done in the first 
embodiment, for the purpose of configuring the priority 5 
of a router in strict conformity with the case in which traf- 
fic is actually utilized. 

[0085] As in the first embodiment, the network of 
this embodiment includes the client 11, the server 12. 
the directory server 16. the event notrfier 17 and the to 
configuration server 18. 

(b) Functions of components 

(b-1) Client is 

[0086] The client 11 is an end terminal such as a 
personal computer and is connected to the network. If a 
user logs in utilizing the client 11, user information (the 
user identifier) is reported to the directory server 16 20 
using LDAP. More specifically, when the user logs in by 
entering a user identifier or password, etc., from the cli- 
ent 11 , the latter reports the user identifier and its own 
IP address to the directory server 1 6 by LDAP Similarly, 
if a certain user launches a prescribed application using 25 
the client 11 . the latter registers the application informa- 
tion (the application identifier and the IP address of the 
server with which this application communicates) in the 
directory server 16 using LDAP. 

30 

(b-2) Directory server 

[0087] The directory server 16 manages, in the 
form of a database, information relating to users and 
information relating to applications launched by users. 3s 
More specifically, the directory server 16 retains, in the 
form of a database. (1) a user identifier, (2) the IP 
address of an end terminal at which the user has logged 
in, (3) the identifier of an application utilized by the user, 
(4) the IP address of the server with which this appiica- 40 
tion communicates, and (5) the priority for when the 
user utilizes the network (see Fig. 9C). The client 11. 
which is an end terminal, accesses the directory server 
16 using LDAP and subjects the user information to 
database processing (processing such as responding to 45 
inquiries, updating information and creating informa- 
tion). When a user has logged in or launched an appli- 
cation, the client 11 notifies the directory server 16 of 
the information relating to the user or of the information 
relating to the application. so 
[0088] As shown in Fig. 9 A. (1 ) the priority for when 
the user utilizes the network and (2) other user-specific 
information have initially been registered in the data- 
base of directory server 16 in correspondence with a 
user identifier. If the user logs in by inputting the user 55 
identifier from the client 11 under these conditions, the 
client 1 1 notifies the directory server 16 of the user iden- 
tifier and IP address of the client by LDAP. Upon receiv- 



ing the identifier and IP address, the directory server 16 
registers the IP address of the client in the database in > 
correspondence with the above-mentioned user identi- 
fier, as shown in Fig. 9B. For example, as shown in Fig. 
9A, 8 has been registered as the priority in the database 
of directory server 16 in correspondence with the user 
identifier "fujitsu". If user A logs in by inputting the user 
identifier "fujitsu" from the client 1 1 under these condi- 
tions, the IP address 192.168.10.20 (= IPc) of the client 
11 is registered in the database anew as the user-spe- 
cific information of user A. as shown in Fig. 9B. 
[0089] Similarly if the user launches an application 
that utilizes an accounts database, the client 1 1 notifies 
the directory server 16 of the identifier -accounting" of 
the above-mentioned application and of the IP address 
"192.168.30.11 (- IPa)" of the accounts server 12, 
which is the destination with which this application com- 
municates, by LDAP. Upon being so notified, the direc- 
tory server 16 registers the application identifier 
"accounting" and the IP address 192.168.30.11 (= IPa) 
in the database, as shown in Fig, 9C. 

(b-3) Event notifier 

[0090] The event notifier 17 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notifier 17 is shown as being 
separate from the directory server 16, it is actually pro- 
vided within the directory server 16. The event notrfier 
17 monitors, on a per-user basis, a change in state from 
an appiication-inactive state (a state in which an appli- 
cation identifier has not been registered in the directory 
server) to an application-launched state (a state in 
which an application identifier has been registered in 
the directory server) and, if a change has occurred, noti- 
fies the configuration server 1 8 of (1 ) the IP address IPc 
of the end terminal that launched the application. (2) the 
identifier of the launched application, (3) the IP address 
IPa of the destination with which the application commu- 
nicates, and (4) the fact that an application-launch event 
has occurred (i.e., the type of event). 
[0091] The monitoring of a change in application 
information in the database can be implemented by 
having the event notrfier 1 7 read out the database infor- 
mation of the directory server 16 periodically and com- 
pare the information with that read out previously. 

(b-4) Configuration server 

[0092] The configuration server 1 8 has the following 
functions (1) to (4): 

(1) Upon receiving notification of the application- 
launch event from the event notifier 1 7. the configu- 
ration server 18 uses the IP address of the end ter- 
minal that launched this application as a key to 
query the directory server 1 6 as to the priority of the 
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user who is utilizing the end terminal and obtains a 
response regarding this inquiry. In this embodi- 
ment, a response to the effect that the priority is 8 is 
obtained when the directory server 16 is queried 
using the IP address IPc as the key s 

It should be noted that an arrangement can be 
adopted in which the configuration server 18 has 
the event notifier 17 report the user identifier in 
addition to the application information, uses this 
user identifier to query the directory server 16 with 10 
regard to the priority of the user who is utilizing the 
end terminal and acquires this priority. 

(2) Next, through a method similar to that of the first 
embodiment, the configuration server 18 uses the 
reported IP addresses of the client 1 1 and server is 
12 and the IP routing information to specify the rout- 
ers 14,, 142 an d * ne switches 15,. 15 3 , 164 that 
relay the sent and received traffic that occurs 
between the client 1 1 and the server 12. More spe- 
cifically, the configuration server 18 identifies the 20 
network devices on the communication path CPT 
between the client 1 1 and server 1 2. 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 25 
addresses of the relaying routers 1 4 1 , 1 42- 

(4) On the basis of the router information and prior- 
ity of the user, the configuration server 18 gener- 
ates a priority control parameter to configure the 
router and sets this parameter in the router. For 30 
example, if the user priority entered from the direc- 
tory server 16 is 8 and a router can be set to only 
two, namely high and low, priorities, the configura- 
tion server 18 determines whether the user priority 

of 8 is the high or low priority and, if it is the high pri- 35 
orrty, sets the router to the high priority. 

[0093] By repeating the above configuring for each 
router, the configuring of the priority of all routers on the 
communication path from the client 1 1 to the server 12 to 
will eventually be completed and, as a result, it will be 
possible to provide a service for communicating traffic 
between the client and server at a priority higher than 
that of other traffic. 

45 

(c) Priority configuration sequence 

[0094] Fig. 10 is a diagram useful in describing a 
priority configuration sequence according to the first 
embodiment. This illustrates a case in which when the so 
user has logged in from the client 1 1 and then launched 
an application, the configuration server 18 uses launch- 
ing of the application as an event to perform priority con- 
trol by configuring the routers 14,, 14^ on the 
communication path with priority control information in 55 
accordance with a priority set in advance for this user. 

I. When the user having the user identifier "fujitsu" 



logs in to the communication terminal (client) 11 
having the IP address 192.169.10.20 (= IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". Accordingly, the LDAP 
message contains the user identifier "fujitsu" and 
the IP address of the client. The directory server 16 
registers the IP address of the dient in association 
with the user identifier 'lujitsu" in the database (see 
Fig. 9B). 

II. When the user having the user identifier "fujitsu" 
launches a prescrfoed application at the client 1 1 
having the IP address IPc, this client sends the 
directory server 16 an LDAP message in order to 
register the application information in the directory 
server 16. The LDAP message contains, as appli- 
cation information, (1) the application identifier 
"accounting" launched by the user having the user 
identifier "fujitsu", and (2) the IP address 
192.168.30.1 1 (= IPa) of the server with which the 
application communicates. Accordingly, the direc- 
tory server 16 registers the application identifier 
"accounting" and the IP address 192.168.30.11 (= 
IPa) of the server with which this application com- 
municates in the database in association with the 
user identifier "f ujitsu" (see Fig. 9C). 

III. If the event notifier 1 7 within the directory server 
16 detects launching of the application, the event 
notifier 1 7 notifies the configuration server 1 8 of the 
fact that an application which has the application 
identifier "accounting" and which communicates 
with a server having the IP address IPa has been 
launched at the client 1 1 having the IP address IPc. 

IV. The configuration server 18 queries the direc- 
tory server 16 in regard to the priority of the user by 
LDAP using the IP address (= IPc) of the communi- 
cation terminal as the key and obtains, as a 
response, the fact that the priority is 8. 

V. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14, is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains the state of 
the router 14, and information (Fig. 5) relating to 
the configuration items. As a result, the router 14 1 
can be configured using Telnet and it is ascertained 
that this router possesses two priority settings, 
namely high and low. 

VII. If the priority that has been assigned to the user 
identifier "fujitsu" has a value of 8 (the maximum 
value being 10) among ten priority levels, the con- 
figuration server 18 recognizes that the router 14, 
is to be configured for high-priority processing. 
Next, the configuration server 18 performs Telnet 
communication for the router 14, of IP address IPr 
and establishes a high priority for communication 
for which the IP address on the originating side is 
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IPc and the IP address at the destination is IPs 
VIII. The configuring of priority processing 
described above is performed for other routers as 
well. 

5 

(D) Third embodiment 
(a) Construction 

[0095] Fig. 11 is a diagram illustrating an example 10 
of the construction of a third embodiment of the present 
invention. Components identical with those of the sec- 
ond embodiment shown in Fig. 8 are designated by like 
reference characters. 

[0096] According to the third embodiment, the event is 
notifier 17 performs monitoring to determine that an 
application has been launched at an end terminal and, 
on the basis of detection of application launch (event 
detection), the configuration server 18 configures prior- 
ity for a router on the communication path of the appti- 20 
cation. In the second embodiment, configuring of 
priority is performed for a router by utilizing a priority 
that is decided for each user. In the third embodiment, 
however, configuring of priority is performed for a router 
by utilizing a priority that is decided for each application. 25 
In accordance with the third embodiment, priority con- 
trol made to conform to the characteristics of the appli- 
cation becomes possible. 

[0097] As in the first and second embodiments, the 
network according to the third embodiment includes the 30 
client 11, the server 12, the directory server 16. the 
event notrfier 17 and the configuration server 18. 

(b) Functions of components 

35 

(b-1) Client 

[0098] The client 11 is an end terminal such as a 
personal computer and is connected to the network. If a 
user logs in utilizing the client 1 1 , user information (the 40 
user identifier) is registered in the directory server 16 
using LDAP. More specifically, when the user logs in by 
entering a user identifier or password, etc., from the cli- 
ent 1 1 , the latter registers the user identifier arid its own 
IP address in the directory server 1 6 by LDAP. Similarly, 45 
if a certain user launches a prescribed application using 
the client 1 1 , the latter registers the application informa- 
tion (the application identifier and the IP address of the 
server with which the application communicates) in the 
directory server 16 using LDAP. so 
[0099] It should be noted that H application priority 
and the IP address of the communication<lestination 
server of the application have been registered in the 
directory server 16 in association with the application 
identifier, the client need only register the application* ss 
identifier in the directory server 16 as the application 
information. 



(b-2) Directory server 

[0100] The directory server 16 manages, in the 
form of a database, information relating to users and 
information relating to applications launched by users. 
The user information contains (1) the user identifier, (2) 
the IP address of the end terminal at which the user has 
logged in, (3) the identifier of the application utilized by 
the user, (4) the IP address of the server with which this 
application communicates, and (5) other specific infor- 
mation (see Fig. 1 1C). Further, the application informa- 
tion contains (1) the application identifier and (2) the 
priority of the application. However, the application infor- 
mation can include the IP address of the server with 
which the application communicates. 
[0101] The client 11. which is an end terminal, 
accesses the directory server 16 using LDAP and sub- 
jects the user information to database processing 
(processing such as responding to inquiries, updating 
information and creating information). When a user has 
logged in or launched an application, the client 11 noti- 
fies the directory server 16 of the information relating to 
the user or of the information relating to the application. 
[0102] As shown in Fig. 12 A. only user-specific 
information has initially been registered in the directory 
server 16 in correspondence with a user identifier. An 
application priority of 6 has been registered in corre- 
spondence with the application identifier "accounting". 
[01 03] If the user logs in by inputting the user iden- 
tifier from the client 1 1 under these conditions, the client 
11 notifies the directory server 16 of the user identifier 
and IP address of the client by LDAP." Upon receiving 
the identifier and IP address, the directory server 16 
registers the IP address 192.168.10.20 (= IPc) of the cli- 
ent in correspondence with the above-mentioned user 
identifier, as shown in Fig. 12B. 
[01 04] Similarly, if the user launches an application 
that utilizes an accounts database, for example, the cli- 
ent 11 notifies the directory server 16 of the identifier 
"accounting" of the above-mentioned application and of 
the IP address "192.168.30.11 (= IPa)" of the accounts 
server 1 2, which is the destination with which this appli- 
cation communicates, by LDAP. Upon being so notified, 
the directory server 16 registers the application identi- 
fier and the IP address of the server, which is the desti- 
nation with which the application communicates, in the 
database, as shown in Fig. 12C. 

(b-3) Event notrfier 

[01 05] The event notifier 1 7 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notrfier 17 is shown as being 
separate from the directory server 16. it is actually pro- 
vided within'the directory server 16. The event notifier 
17 monitors, on a per-user basis, a change in state from 
an application-inactive state to an application-launched 
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state and, if a change has occurred, notifies the config- 
uration server 18 of (1) the IP address IPc of the end ter- 
minal that launched the application, (2) the identifier of 
the launched application, (3) the IP address IPa of the . 
destination with which the application communicates, 5 
and (4) the fact that an application-launch event has 
occurred (i.e., the type of event). 
[0106] The monitoring of a change in appfication 
information in the database can be implemented by 
having the event notifier 1 7 read out the database infor- 10 
mation of the directory server 1 6 periodically and com- 
pare the information with that read out previously. 

(b-4) Configuration server 

15 

[0107] The configuration server 18 has the following 
functions (1)to(4): 

(1) Upon receiving notification of the application- 
launch event from the event notif ier 1 7, the conf igu- 20 
ration server 18 uses the application identifier con- 
tained in the event notification as a key to query the 
directory server 16 as to the priority, on the net- 
work, of the application that has been launched at 

the end terminal, and obtains a response regarding 25 
this inquiry. In this embodiment, a response to the 
effect that the priority is 6 is obtained when the 
directory server 16 is queried using the application 
identifier "accounting* as the key. 

(2) Next, through a method similar to that of the first " 30 
embodiment the configuration server 18 uses the 
reported IP addresses of the client 11 and server 

12 and the IP routing information to specify the rout- 
ers 14 1( 142 and * ne switches 15 t , 163, 15 4 that 
relay the sent and received traffic that occurs 35 
between the client 1 1 and the server 12. More spe- 
cifically, the configuration server 18 identifies the 
network devices (routers and switches) on the com- 
munication path CPT between the client 11 and 
server 12. 40 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 
addresses of the relaying routers. 

(4) On the basis of the router information and prior- 45 
rty of the application, the configuration server 18 
generates a priority control parameter to configure 

the router and, using a setting protocol, sets this 
parameter in the router that relays the communica- 
tion between the client and the server. By repeating so 
the above configuring for each router, the configur- 
ing of the priority of all routers on the communica- 
tion path from the client 11 to the server 12 will 
eventually be completed and. as a result it will be 
possible to provide a service for communicating 55 
traffic between the client and server at a priority 
higher than that of other traffic. 



(c) Priority configuration sequence 

[0108] Fig. 13 is a diagram useful in describing a 
priority configuration sequence according to the third 
embodiment. This illustrates a case in which when the 
user has togged in from the client 1 1 and then launched 
an application, the configuration server 1 8 uses launch- 
ing of the application as an event to perform priority con- 
trol by configuring priority control information for the 
routers 14 1f 14 2 on the communication path in accord- 
ance with a priority set in advance for this application. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 11 
having the IP address 192.169.10.20 IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier Fujitsu". The LDAP message 
contains the user identifier "fujitsu" and the IP 
address of the client. Accordingly, the directory 
server 16 registers the IP address of the client in 
association with the user identifier "fujitsu" in the 
database (see Fig. 11B). 

II. When the user having the user identifier "fujitsu" 
launches a prescribed application at the client 1 1 
having the IP address IPc, this client sends the 
directory server 16 an LDAP message in order to 
register the application information. The LDAP 
message contains,. as application information, the 
application identifier "accounting" launched by the 
user having the user identifier "fujitsu", and the IP 
address 192.168.30.11 {= IPa) of the server with 
which the application communicates. Accordingly, 
the directory server 16 registers the application 
identifier "accounting" and the IP address 
192.168.30.11 (= IPa) of the server with which this 
application communicates in the database in asso- 
ciation with the user identifier "fujitsu" (see Fig. 
12C). 

III. If the event notifier 1 7 within the directory server 
16 detects launching of the application, the event 
notifier 17 notifies the configuration server 18 of the 
fact that an application which has the application 
identifier "accounting" and which communicates 
with a server having the IP address IPa has been 
launched at the client 1 1 having the IP address IPc. 

IV. The configuration server 18 queries the direc- 
tory server 16 in regard to the priority of the applica- 
tion by LDAP using the application identifier 
"accounting" as the key and obtains, as a response, 
the fact that the priority is 6. 

V. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14j is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains the*state of 
the router 1 ^ and information relating to the conf ig- 
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uration items. As a result, the router 14 t can be 
configured using Telnet and the configuration 
server 18 can ascertain that this router possesses 
two priority settings, namely high and low. 

VII. If the priority that has been assigned to the 
application has a value of 6 (the maximum value 
being 10) among ten priority levels, the configura- 
tion server 18 recognizes that the router IPr is to be 
configured for high-priority processing. Next, the 
configuration server 18 performs Telnet communi- 
cation for the router 14 t of IP address IPr and 
establishes a high priority for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 

VIII. The configuring of priority processing 
described above is performed for other routers as 
well. 

(E) Fourth embodiment 

(a) Construction 

[0109] Fig. 14 is a diagram illustrating an example 
of the construction of a fourth embodiment of the 
present invention. Components identical with those of 
the third embodiment shown in Fig. 1 1 are designated 
by like reference characters. In the third embodiment, 
priority configuration for a router on the communication 
path of an application is performed based upon the pri- 
ority of the application. In the fourth embodiment, how- 
ever, bandwidth is configured for a router on the 
communication path of an application based upon the 
bandwidth required by the application. In accordance 
with the fourth embodiment, it is possible to assure 
communication quality more reliably in comparison with 
priority control. 

[01 1 0] As in the first through third embodiments, the 
network according to the fourth embodiment includes 
the client 11, the server 12, the directory server 16, the 
event notifier 17 and the configuration server 18. 

(b) Functions of components 
(b-1) Client 

[0111] The client 1 1 is an end terminal such as a 
personal computer and is connected to the network. If a 
user logs in utilizing the client 11, user information (the 
user identifier) is registered in the directory server 16 
using LDAP. More specifically, when the user logs in by 
entering a user identifier or password, etc., from the cli- 
ent 1 1 . the latter registers the user identifier and its own 
IP address in the directory server 16 by LDAP. Similarly, 
if a certain user launches a prescribed application using 
the client 1 1 . the latter registers the application informa- 
tion (the application identifier and the IP address of the 
communication-destination server of the application) in 
the directory server 16 using LDAP. Similarly, if a certain 



user launches a prescribed application using the client 
11, the latter registers the application information (the 
application identifier and the IP address of the server 
with which the application communicates) in the direc- 
s tory server 16 using LDAP. 

(b-2) Directory server * 

[0112] The directory server 16 manages, in the 

w form of a database, information relating to users and 
information relating to applications launched by users. 
The user information contains (1) the user identifier, (2) 
the IP address of the end terminal at which the user has 
logged in, (3) the identifier of the application utilized by 

is the user, (4) the IP address of the server with which this 
application communicates, and (5) other specific infor- 
mation (see Fig. 15C). Further, the application informa- 
tion contains (1) the application identifier and (2) the 
bandwidth required by the application. The application 

20 information can include the IP address of the server with 
which the application communicates. 
[0113] The client 11, which is an end terminal, 
accesses the directory server 16 using LDAP and sub- 
jects the user information to database processing 

25 (processing such as responding to inquiries, updating 
information and creation of information). Then a user 
has logged in or launched an application, the client 1 1 
notifies the directory server 16 of the information relat- 
ing to the user or of the information relating to the appli- 

30 cation. 

[0114] As shown in Fig. 15A, only user-specific 
information has initially been registered in the directory 
server 16 in correspondence with a user identifier. A 
bandwidth of 1.5 Mops required by the application has 

35 been registered in correspondence with the application 
identifier "videoplayer". If the user logs in by inputting 
the user identifier "f ujitsu" from the client 1 1 under these 
conditions, the client 11 notifies the directory server 16 
of the user identifier and IP address 192.168.10.20 (= 

40 IPc) of the client by LDAP. Upon receiving the user iden- 
tifier and IP address, the directory server 16 registers 
the IP address IPc of the client in correspondence with 
the above-mentioned user identifier, as shown in Fig. 
15B. 

45 [01 1 5] Similarly, if the user launches an application 
for reproducing video, the client 1 1 notifies the directory 
server 16 of the identifier "videoplayer- of the above- 
mentioned application and of the IP address 
"192.168.30.1 1 (= IPa)" of the video server 12, which is 

so the destination with which this application communi- 
cates, by LDAP. Upon being so notified, the directory 
server 16 registers the application identifier "video- 
player" and the IP address (= IPa) of the video server, 
which is the destination with which the application com- 

55 municates, in the user information field of the database, 
as shown in Fig. 15C. 
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(b-3) Event notrfier 

[0116] The event notrfier 17 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 5 
work. Though the event notrfier 17 is shown as being 
separate from the directory server 16, it is actually pro- 
vided within the directory server 16. The event notifier 
1 7 monitors, on a per-user basis, a change in state from 
an application-inactive state to an application-launched w 
state and, if a change has occurred, notifies the config- 
uration server 1 8 of (1 ) the IP address IPc of the end ter- 
minal that launched the application, (2) the identifier of 
the launched application, (3) the IP address IPa of the 
destination with which the application communicates, 15 
and (4) an event notifier "application", which indicates 
the fact that an application-launch event has occurred. 
[0117] The monitoring of a change in application 
information in the database can be implemented by 
having the event notifier 1 7 read out the database infor- 20 
mation of the directory server 16 periodically and com- 
pare the information with that read out previously. 

(b-4) Configuration server 

25 

[0118] The configuration server 18 has the following 
functions (1) to (4): 

(1) Upon receiving notification of the application- 
launch event from the event notifier 17, the cbhfigu- 30 
ration server 18 decides, based upon the event 
identifier "application" contained in event notifica- 
tion, whether to perform control for bandwidth res- 
ervation. If bandwidth control is to be performed, 

the configuration server 18 uses the application 35 
identifier contained in the event notification as a key 
to query the directory server 16 as to the bandwidth 
required by the application that has been launched 
at the end terminal, and obtains the response "1.5 
Mbps" regarding this inquiry. In this embodiment, a 40 
response to the effect that the bandwidth is 1.5 
Mbps is obtained when the directory server 16 is 
queried using the application identifier "videk)- 
player" as the key. 

(2) Next, through a method similar to that of the first 45 
embodiment, the configuration server 18 uses the 
reported IP addresses of the client 11 and server 

12 and the IP routing information to specify the rout- 
ers 14 1t 14 2 and the switches 15 t , 153. 15 4 that 
relay the sent and received traffic that occurs so 
between the client 1 1 and the server 12. More spe- 
cifically, the configuration server 18 identifies the 
network devices (routers and switches) on the com- 
munication path CPT between the dient 1 1 and 
server 12. ss 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 



addresses of the relaying routers. 
(4) On the basis of the router information and the 
bandwidth required by the application, the configu- 
ration server 18 generates a bandwidth control 
parameter to configure the router and sets this 
parameter in the router that relays the communica- 
tion between the client and the server. By repeating 
the above configuring for each router, the configur- 
ing of the bandwidth of all routers on the communi- 
cation path from the client 11 to the server 12 will 
eventually be completed. As a result, the bandwidth 
required by the application can be assured between 
the client and the server and communication can be 
performed at a high quality. 

(c) Bandwidth configuration sequence 

[0119] Fig. 16 is a diagram useful in describing a 
bandwidth configuration sequence according to the 
fourth embodiment. This illustrates a case in which 
when the user has logged in from the client 1 1 and then 
launched an application, the configuration server 18 
uses launching of the application as an event to perform 
bandwidth configuration control of the routers 14 n , 14 2 
on the communication path in accordance with the 
required bandwidth set in advance for this application. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 11 
having the IP address 192.169.10.20 (= IPc). the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier "fujitsu" and the IP 
address of the client. Accordingly, the directory 
server 16 registers the IP address of the client in 
association with the user identifier "fujitsu" in the 
database (see Fig. 15B). 

II. When the user having the user identifier "fujitsu" 
launches a prescribed application at the client 11 
having the IP address IPc. this client sends the 
directory server 16 an LDAP message in order to 
register the application information. The LDAP 
message contains, as application information, the 
application identifier "videoplayer" for video repro- 
duction launched by the user having the user iden- 
tifier "fujitsu", and the IP address 192.168.30.11 (= 
IPa) of the video server with which the application 
communicates. Accordingly, the directory server 16 
registers the application identifier "videoplayer" and 
the IP address 192.168.30.11 (= IPa) of the server 
with which this application communicates in the 
database in association with the user identifier 
"fujitsu" (see Fig. 15C). 

III. If the event notifier 17 within the directory server 
16 detects launching of the application, the event 
notifier 17 notifies the configuration server 18 of the 
fact that an application which has the application 
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identifier "videoplayer" and which communicates 
with a video server having the IP address IPa has 
been launched at the dient 11 having the IP 
address IPc. 

IV. The configuration server 18 queries, by LDAP, 
the directory server 16 in regard to the bandwidth 
required by the application using the application 
identifier "videoplayer" as the key and obtains, as a 
response, the fact that the required bandwidth is 
1.5 Mbps. 

V. Next, on the basis ol OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14j is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains router infor- 
mation (state and information relating to the config- 
uration items) concerning the router 14 v As a 
result, the router 14^ can be configured using Telnet 
and the configuration server 18 can ascertain that 
this router is capable of having Hs bandwidth config- 
ured. 

VH. The configuration server 18 performs Telnet 
communication with respect to the router 14, of IP 
address IPr and performs configuring to allocate 
the bandwidth of 1.5 Mbps for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 
VIII. The above-described allocating of bandwidth 
is performed for other routers as well. 

(d) Modification 

[0120] The fourth embodiment relates to a case 
where the bandwidth required by an application is regis- 
tered beforehand in the application information field of 
the directory server 16. as shown in Fig. 15A. the band- 
width required by the application is obtained from this 
registered data and is reported to the configuration 
server. However, it is not necessary to register the 
required bandwidth in advance. For example, an 
arrangement may be adopted in which when an applica- 
tion is launched, the required bandwidth is registered in 
the user information field upon being sent to the direc- 
tory server 1 6 along with the application identifier and IP 
address of the destination with which the application 
communicates. Fig, 17 illustrates an example of the 
database structure in directory server 16 in such case. 
With this data structure, the configuration server 18 is 
capable of querying the directory server 16 in regard to 
required bandwidth using a combination of both the 
user identifier and application identifier as a key. 
[0121] Further, though the foregoing relates to a 
case in which bandwidth is controlled, control of packet 
discard rate and control of delay can be executed in the 
same manner. Further, an arrangement can be adopted 
in which two or more types of control such as control of 
bandwidth, control of discard rate and control of data, 



inclusive of control of priority, can be performed simulta- 
neously. 

[0122] Further, the foregoing relates to a case in 
which bandwidth required by an application is set in 

5 advance and the bandwidth of a router is controlled, in 
response to launching of the application, based upon 
the bandwidth required by this application. However, an 
arrangement can be adopted in which required band- 
width is set for every user in advance and bandwidth is 

w controlled, in response to launching of an application, 
based upon the bandwidth required by the user. 
[0123] Further, the foregoing relates to a case 
where bandwidth, discard rate and delay are controlled 
by launching an application. However, an arrangement 

15 can be adopted in which bandwidth, discard rate and 
delay are controlled by generating a log-in event. 
[0124] Fig. 18 is a diagram useful in describing a 
sequence in a case where allocation of bandwidth to a 
router on a communication path is performed based 

20 upon bandwidth required by a user at occurrence of a 
log-in event, and Figs. 19A, 19B are diagrams showing 
the structure of the directory server 1 6. As shown in Fig. 
19A, a bandwidth (1.5 Mbps) required by a user and the 
IP address of an important server communicated with in 

25 dedicated fashion by the user have been registered in 
association with a user identifier. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 11 

30 having the IP address 192.169,10.20 (« IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier Tujitsu" and the IP 

35 address of the client. The directory server 16 regis- 
ters the IP address of the client in association with 
the user identifier lujitsu" in the database (see Rg. 
19B). 

II. The event notifier 17 within the directory server 
40 16 detects log-in and notifies the configuration 

server 1 8 of the fact that a user having the user 
identifier "fujitsu" has logged in to the client 1 1 hav- 
ing the IP address IPc. 

III. The configuration server 18 queries the direc- 
45 tory server in regard to the required user bandwidth 

by LDAP using the user identifier "fujitsu" as the key 
and obtains, as a response, the fact that the 
address of the server 12 is 192.168.20.30 (* IPa) 
and that the required bandwidth is 1 .5 Mbps. 

so IV Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14 t is "192.168.15.1 (= IPr)". 

55 V. The configuration server 18 obtains router irrfor- J 
mation (state and information relating to the config- 
uration items) concerning the router 14,. As a 
result, the router 14! can be configured using Telnet 
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and the configuration server 18 can ascertain that 
this router is capable of having its bandwidth config- 
ured. 

VI. The configuration server 18 performs Telnet 
communication with respect to the router 14 1 of IP 5 
address IPr and performs conliguring to allocate 
the bandwidth of 1.5 Mbps for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 

VII. The above-described allocating of bandwidth is 10 
performed for other routers as well. 

[01 25] The foregoing is for a case where bandwidth 
is controlled. However, control of packet discard rate 
and control of delay can be performed in similar fashion, is 
Further, an arrangement can be adopted in which two or 
more types of control such as control of bandwidth, con- 
trol o1 discard rate and control of data, inclusive of con- 
trol of priority, can be performed simultaneously. 
10126] Thus, in accordance with the present inven- 
tion, a network device is found on a communication path 
connecting a communication terminal employed by a 
user and a server that is the destination with which this 
terminal communicates, and priority is controlled by 
configuring priority information, which conforms to the 
priority of the user, for this network device. As a result 
control of priority can be performed dynamically, without 
using a specific protocol such as RSVP, even if there is 
a change in a terminal employed by a user or a change 
in network configuration due to the addition of a network 
device. 

[0127] Further, in accordance with the present 
invention, communication can be performed between a 
terminal employed by a user and a server, with which 
this terminal communicates, at a priority set for the user 
in advance. As a result, by setting a priority that takes 
the post of an employee and organization, etc., into 
account in an enterprise network, rt is possible to per- 
form communication based upon priority control com- 
mensurate with the set priority. 
[0128] Further, in accordance with the present 
invention, there is provided a database for storing, in 
association with a user identifier, user information that 
includes the address of a server that is the destination 
of communication and the user priority. An event notifi- 
cation device acquires user priority and the server 
address from the database and reports these to a net- 
work-device controller. As a result, the user, merely by 
entering the user identifier from a prescribed communi- 
cation terminal and logging in, establishes a communi- 
cation path between this communication terminal and 
the server with which the user wishes to communicate. 
Communication between the terminal employed by the 
user and the server can be performed at the priority set 
for the user beforehand. 

[0129] Further, in accordance with the present 
invention, when an application is launched after user 
log-in, the priority control mentioned above is carried 



out. As a result, the configuring of priority control neces- 
sary for the user in a network can be performed at a 
time when priority control is required and with respect to 
a device that requires control of priority. 
[0130] Further, in accordance with the present 
invention, a network device is found on a communica- 
tion path connecting a communication terminal 
employed by a user and a server that is the destination 
with which this terminal communicates, and priority is 
controlled by configuring priority information, which con- 
forms to the priority of an application that has been 
launched, tor this network device. As a result, control of 
priority can be performed dynamically, without using a 
specific protocol such as RSVP, even if there is a 
change in a terminal employed by a user or a-change in 
network configuration due to the addition of a network 
device. 

[0131] Further, in accordance with the present 
invention, communication can be performed between a 
20 terminal employed by a user and a server, with which 
this terminal communicates, at a priority set for an appli- 
cation in advance. As a result, by configuring priorities 
for various applications in an enterprise network upon 
taking into account the urgency and importance of 
25 these applications, it is possible to perform communica- 
tion based upon control of priority commensurate with 
the set priority. 

[0132] Further, in accordance with the present 
invention, an event notification device acquires the pri- 
30 or'rty of an application . the address of a server that is the 
destination of communication and the address of the 
communicating terminal from a database based upon 
the application identifier and reports these to a network- 
device controller. As a result, the user, merely by enter- 
35 ing a user identifier from a prescribed communication 
terminal, logging in and launching a prescribed applica- 
tion, establishes a communication path between this 
communication terminal and the server that conforms to 
the application. Communication between the terminal 
40 employed by the user and the server can be performed 
at the priority set for the application beforehand. 
[0133] Further, in accordance with the present 
invention, control of quality (bandwidth control, discard- 
rate control and delay control) can be performed 
45 dynamically without using a specific protocol even if 
there is a change in a terminal employed by a user or a 
change in network configuration due to the addition of a 
network device. In addition, communication can be per- 
formed between a terminal employed by a user and a 
so server, which is the destination of communication, at a 
quality set for the user or application in advance. 
[01 34] As many apparently widely different embodi- 
ments of the present invention can be made without 
departing from the spirit and scope thereof, it is to be 
55 understood that the invention is not limited to the spe- 
cific embodiments thereof except as defined in the 
appended claims. 
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Claims 4 - 

1 . A network-device control system for performing pri- 
ority control of a network device constituting a net- 
work based upon priority of an user, said system s 
comprising: 

an event notification device for detecting that a 
user has logged in to a communication terminal 
or that a user has launched a predetermined w 
application from a communication terminal, 
and reporting an identifier of the user and the 
fact that an event has occurred; and 
a network-device controller for performing pri- 
ority control of a network device based upon is 
information reported by said event notification 
device; wherein 

said network-device controller acquires priority 
of the user indicated by the user identifier 
reported by said event notification device, 20 
obtains a network device on a communication 
path between said communication terminal and 5. 
an apparatus that is the destination of commu- 
nication, generates information necessary to 
perform priority control in accordance with the 25 
user priority, and sets this priority control infor- 
mation in each network device. 

2. The system according to claim 1 , further compris- 
ing a database unit for storing, in association with a 30 
user identifier, user information that includes the 
address of the apparatus that is the destination of 
communication and the user priority; wherein 

said event notification device acquires the pri- 35 
ority of the user and the address of the appara- 
tus that is the destination of communication 
from said database unit and reports these to 
said network-device controller. 

• 40 

3. The system according to claim 2, wherein 

when a user has logged in by inputting the user 
identifier, the -communication terminal sends 
this user identifier and the address of the com- 45 
munication terminal to said database unit; 
said database unit stores the address of the 
communication terminal in association with the 
user identifier; and 

said event notification device detects log-in by so 
a change in user information in said database 
unit, acquires the priority of the user, the 
address of the apparatus that is the destination 
of communication and the address of the com- 
munication terminal from said database unit. 55 
and reports these to said network-device con- 
troller. 6. 



The system according to claim 2, wherein 

when a user has launched a predetermined 
application, the communication terminal sends 
the user identifier, the address of the communi- 
cation terminal and an application identifier of 
the application to said database unit; 
said database unit stores the address of the 
communication terminal, the application identi- 
fier and the address of an apparatus that is the 
destination of communication of the application 
in association with the user identifier; and 
said event notification device detects an appli- 
cation-launch event by a change in application 
information in said database unit, acquires the 
priority of the user, the address of the appara- 
tus that is the destination of communication 
and the address of the communication terminal 
from said database unit, and reports these to 
said network-device controller. 

The system according to daim 1, wherein said 
event notification device includes: 

an event detector for detecting that a user has 
logged in to a communication terminal or that a 
user has launched an application from a com- 
munication terminal; and 
an event notifier for notifying said network- 
device controller of the fact that the event 
occurred and of the user identifier; and 
said network-device controller includes: 
an event receiver for receiving notification from 
said event notifier; 

a priority acquisition unit for acquiring the prior- 
ity of the user indicated by the received user 
identifier; 

a device selector for selecting a network device 
which is subjected to priority control based 
upon the priority of the user; 
a device-specific information acquisition unit for 
acquiring state of configuration of the selected 
• network device and a method of configuring the 
device; 

a configuration inforrnation generator for gener- 
ating priority-control configuration information 
for performing priority control of each network 
device based upon the acquired device-spe- 
cific information and user priority; and 
configuration information transmitter for trans- 
mitting the priority-control configuration infor- 
mation, which has been generated by said 
configuration information generator, to the 
selected network device to thereby set this 
information in this network device. 

The system according to claim 2, wherein a direc- 
tory server is provided, said directory server being 
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provided with said event notification device and 
said database unit. 

7. A network-device control apparatus for performing 
priority control of a network device constituting a 5 
network based upon priority of an user, said appa- 
ratus comprising: 

an event receiver for receiving an identifier of a 
user from an event notifier when the user has to 
logged in to a communication terminal or when 
the user has launched an application; 
means for acquiring priority of the user, which 
is indicated by the reported user identifier, and 
the address of an apparatus that is the destina- 15 
tion ol communication by said communication 
terminal; 

a device selector for selecting network devices 
on a path along which the communication ter- 
minal and the apparatus that is the destination 20 
01 communication communicate; 
a generating unit for generating information 
necessary to perform priority control in accord- 
ance with the user priority; and 
means for configuring the network device with 25 
the information that has been generated by 
said generating unit. 

8. A network-device control system for performing pri- 
ority control of a network device constituting a net- 30 
work based upon priority of an application, said 
system comprising: 

an event notification device for detecting that a 
user has launched a predetermined application 35 
from a communication terminal, and reporting 
an identifier of the application and the fact that 
an application-launch event has occurred; and 
a network-device controller for performing pri- 
ority control of a network device based upon 40 
information reported by said event notification 
device; wherein 

said network-device controller acquires priority 
of the application indicated by the application 
identifier reported by said event notification 45 
device, obtains network devices on a communi- 
cation path between said communication termi- 
nal and an apparatus that is the destination of 
communication, generates information neces- 
sary to control the network devices in accord- so 
ance with the application priority, and 
configures each network device with this prior- 
ity control information. 

9. The system according to claim 8. further compris- 55 
ing a database unit for storing user information in 
association with a user identifier, and application 
information, which includes the application priority, 



in association with an application identifier; wherein 

said event notification device acquires the pri- 
ority of the application from said database unit 
and reports this application priority to said net- 
work-device controller. 

10. The system according to claim 9, wherein 

when the user has launched a predetermined 
application, the communication terminal sends 
the application identifier and the address of the 
apparatus that is the destination of communi- 
cation to said database unit and said database 
unit stores the application identifier and the 
address of the apparatus, which is the destina- 
tion of communication, in association with the 
user identifier; and 

said event notification device detects occur- 
rence of an application-launch event by a 
change in the application information in the 
user information in said database unit, acquires 
the priority of the application, the address of 
the apparatus that is the destination of commu- 
nication and the address of the communication 
terminal from said database unit, and reports 
these to said network-device controller. 

11. The system according to claim 8, wherein said 
event notification device includes: 

an event detector for detecting that a communi- 
cation terminal has given rise to an application- 
launch event; and 

an event notifier for notifying said network- 
device controller of the fact that the event 
occurred and of the application identifier; and 
said network-device controller includes: 
an event receiver for receiving notification from 
said event notifier; 

a priority acquisition unit for acquiring the prior- 
ity of the application indicated by the received 
application identifier; 

a device selector for selecting a network device 
which is subjected to priority control based 
upon the priority of the application; 
adevice-specHic information acquisition unit for 
acquiring state of configuration of the selected 
network device and a method of configuring the 
device; 

a configuration information generator for gener- 
ating priority-control configuration information 
for performing priority control of each network 
device based upon the acquired device-spe- 
cific information and application priority; and 
configuration information transmitter for trans- 
mitting the priority-control configuration infor- 
mation, which has been generated by said 
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configuration information generator, to the 
selected network device to thereby set this 
information in this network device. 

12. The system according to daim 9, wherein a direc- s 
tory server is provided, said directory server being 
provided with said event notification device and 
said database unit. 

13. A network-device control apparatus for performing 10 
priority control of a network device constituting a 
network based upon priority of an application, said 
apparatus comprising: 

an event receiver for receiving an identifier of 15 
an application from an event notification device 
when a user has launched an application at a 
communication terminal; 
means for acquiring priority of the application, 
which is indicated by the notified application 20 
identifier, and the address of an apparatus that 
is the destination of communication by said 
communication terminal based upon the appli- 
cation; 

a device selector for selecting network devices 25 
on a path along which the communication ter- 
minal and the apparatus that is the destination 
of communication communicate; 
a generating unit for generating information 
necessary to perform priority control in accord- 30 
ance with the application priority; and 
means for configuring the network device with 
the information that has been generated by 
said generating unit. 

35 

14. A network-device control system for controlling any 
one of bandwidth, discard rate and delay of a net- 
work device constituting a network, said system 
comprising: 

40 

an event notification device for detecting that a 
user has logged in to a communication terminal 
or that a user has launched a predetermined 
application from a communication terminal, 
and reporting an identifier of the user and the 45 
fact that an event has occurred; and 
a network-device controller for controlling any 
one of bandwidth, discard rate and delay of a 
network device based upon information 
reported by said event notification device; so 
said network-device controller: 
acquiring any one of a bandwidth value, dis- 
card-rate value and delay value conforming to 
a user identified by the user identifier reported 
by said event notification device; 55 
obtaining network devices on a communication 
path between said communication terminal and 
an apparatus that is the destination of commu- 



nication; 

generating configuration information necessary 
to control any one of bandwidth, discard rate 
and delay in accordance with the value 
acquired; and 

configuring each network device with this gen- 
erated configuration information. 

15. A network-device control apparatus for controlling 
any one of bandwidth, discard rate and delay of a 
network device constituting a network, said appara- 
tus comprising: 

an event receiver for receiving at least an iden- 
tifier of a user from an event notification device 
when the user has logged in to a communica- 
tion terminal or when the user has a launched 
an application; 

means for acquiring any one of a bandwidth 
value, discard-rate value and delay value con-, 
forming to a user identified by the notified user 
identifier, and the address of an apparatus that 
is the destination of communication by said 
communication terminal; 
a device selector for selecting a network device 
on a path along which the communication ter- 
minal and the apparatus that is the destination 
of communication communicate; 
a generating unit for generating configuration 
information necessary to control any one of 
bandwidth, discard rate and delay in accord- 
ance with said value acquired; and 
means tor configuring the network device with 
the configuration information that has been 
generated by said generating unit. 

16. A network-device control system for controlling any 
one of bandwidth, discard rate and delay of a net- 
work device constituting a network, said system 
comprising: 

an event notification device for detecting that a 
user has launched a predetermined application 
at a communication terminal, and reporting an 
identifier of the application and the fact that an 
application-launch event has occurred; and 
a network-device controller for controlling any 
one of bandwidth, discard rate and delay of a 
network device based upon information 
reported by said event notification device; 
said network-device controller: 
acquiring any one of a bandwidth value, dis- 
card-rate value and delay value of an applica- 
tion identified by the application identifier 
reported by said event notification device; 
obtaining network devices on a communication 
path between said communication terminal and 
an apparatus that is the destination of commu- 
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nication; 

generating configuration information necessary 
to control any one of bandwidth, discard rate 
and delay in accordance with the value 
acquired; and 5 
configuring each network device with this gen- 
erated configuration information. 

17. A network-device control apparatus for controlling 
any one of bandwidth, discard rate and delay of a io 
network device constituting a network, said appara- 
tus comprising: 

an event receiver for receiving an identifier of 
an application from an event identification is 
device when a user has a launched an applica- 
tion at a communication terminal; 
means for acquiring any one of a bandwidth 
value, discard-rate value and delay value con- 
forming to an application identified by the 20 
reported application identifier, and the address 
of an apparatus that is the destination of com- 
munication by said communication terminal 
based upon the application; 
a device selector for selecting a network device 25 
on a path along which the communication ter- 
minal and the apparatus that is the destination 
of communication communicate; 
a generating unit for generating configuration 
information necessary to control any one of 30 
bandwidth, discard rate and delay in accord- 
ance with the value acquired; and 
means fa configuring the network device with 
the configuration information that has been 
generated by said generating unit. & 
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